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Amended claims 

1. (Currently Amended) A system employed by a first application for 
supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an entitlement processor for authorizing user access to said first 
application in response to validation of user identification information; and 

a communication processor for communicating a session initiation 
r e quest to a managing application to initiate initiating generation o^ 

a session identifier particular to a user initiated session and for 
use by a plurality of concurrently operating applications to uniquely identify said user 
initiated session and 

an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, 

in response to validation of user identification 

information. 

2. (Currently Amended) A system according to claim 1, wherein 

said personal record parameters are associated with a patient medical 

record and 

said session initiation r e qu e st to said managing application also 
initiates generation of an encryption key is particular to said user initiated session for 
use by said first application . 

3. (Currently Amended) A system according to claim 2, wherein 

said encryption key is for common use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record in data 
fields of a URL string . 

4. (Currently Amended) A system according to claim 1, wherein 

said communication processor also communicates additional 
parameters to said a managing application for storage, said additional parameters 
including one or more of, (a) an authentication service identifier, (b) a language 
identifier, (c) a userid URL to direct a browser to a starting application upon 
termination of a session , (d) a URL for use in acquiring a web page providing a logon 
menu to support user initiation of another session, (e) a URL to be contacted upon a 
predetermined event and (f) an identification of a type of said predetermined event. 
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5. (Original) A system according to claim 1, including 

an input processor for receiving said session identifier and an 
associated encryption key from said managing application. 

6. (Currently Amended) A system according to claim 5, including 

an encryption processor for use in encrypting medical data associated 
with a personal patient medical record. 

7. (Currently Amended) A system employed by a managing application 
for supporting concurrent operation of a plurality of network compatible applications, 
comprising: 

an input processor for receiving from a first application a session 
initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session; 

an encryption key generator for generating an encryption key for use by 
said first application in encrypting personal record parameters conveyed in URL data 
and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier. 

8. (Currently Amended) A system according to claim 7, including 

wherein 

an said encryption key generator for substantially randomly generating 
generates an encryption key particular to said user initiated session, in response to 
said session initiation request. 

9. (Currently Amended) A system according to claim 8, wherein 

said encryption key is for common use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record. 
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1 0. (Currently Amended) A system according to claim 7, 

A system employed by a managing application for supporting 
concurrent operation of a plurality of network compatible applications, comprising: 

an input processor for receiving from a first application a session 
initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session; and 

a communication processor for, 

communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier wherein 

said communication processor includes said generated session 
identifier in different types of command messages communicated to applications of 
said plurality of concurrently operating applications. 

1 1 . (Currently Amended) A system supporting concurrent operation of 
a plurality of Internet compatible applications, comprising: 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Internet 
compatible applications and for providing user identification information to a first 
application for validation; and 

a managing application for generating A 

a session identifier particular to a user initiated session and 
an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, in response to receiving a session 
initiation request from a first application and for communicating said session 
identifier to said first application. 

12. (Currently Amended) A system according to claim 11, wherein 
said managing application also communicates to said first application 

data items including one or more of, (a) a encryption key is also to be used in 
encrypting and decrypting a session identifier conveyed in URL dat a, (b) an indicator 
identifying whether or not a s e ssion initiation request is s uccessful . 
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13. (Currently Amended) A system according to claim 11, wherein 
said managing application includes 

an said encryption key generator for substantially randomly generating 
generates an encryption key particular to said user initiated session, in response to 
said session initiation request. 

14. (Original) A system according to claim 13, wherein 

said encryption key is for common use by said plurality of concurrently 
operating applications in encrypting data associated with a personal record. 

15. (Currently Amended) A system according to claim 1 1, 

A system supporting concurrent operation of a plurality of Internet 
compatible applications, comprising: 

a browser application providing a user interface display permitting user 
entry of identification information and commands for a plurality of Internet 
compatible applications and for providing user identification information to a first 
a pplication for validation; and 

a managing application for generating, 

a session identifier particular to a user initiated session in 
response to receiving a session initiation request from a first application and for 
communicating said session identifier to said first application wherein 

said managing application includes said generated session identifier in 
different types of command messages communicated to applications of said plurality 
of concurrently operating applications. 

16. (Currently Amended) A method employed by a first application 
operating in a system supporting concurrent operation of a plurality of Internet 
compatible applications, said method comprising the steps activities of: 

authorizing user access to said first application in response to 
validation of user identification information; and 

communicating a session initiation r e quest to a managing application 
to initiate initiating generation of, 

a session identifier particular to a user initiated session and 
an encryption key for use by said first application in encrypting 
personal record parameters conveyed in URL data, in response to validation of user 
identification information. 
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17. (Currently Amended) A method employed by a managing 
application for supporting concurrent operation of a plurality of network compatible 
applications, comprising the steps activities of: 

receiving from a first application a session initiation request to initiate 
generation of a session identifier; 

generating a session identifier particular to a user initiated session and 
for use by a plurality of concurrently operating applications to uniquely identify said 
user initiated session; 

generating an encryption key for use by said first application in 
encrypting personal record parameters conveyed in URL data; and 

communicating said session identifier and said encryption key to said 
first application and to another application of said plurality of concurrently operating 
applications in response to a request to receive said generated session identifier. 

18. (Currently Added) A tangible storage medium incorporating 
machine readable instructions for performing the activities of claim 17. 

19. (Currently Added) A tangible storage medium incorporating 
machine readable instructions for performing the activities of claim 1 8. 
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